simpleenergyonline.com

HTML metadata

Title: Heating Oil Company | Delivery & HVAC Services | Simple Energy
Language: en
Generator: concrete5 - 8.5.2
Canonical: https://simpleenergyonline.com/

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Font Awesome
Google Fonts

Third-party hosts loaded (6)

stackpath.bootstrapcdn.com×2
cdn.jsdelivr.net×1
fonts.googleapis.com×1
seal-concord.bbb.org×1
use.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Phone

16032987200

Registration

Registrar

Network Solutions, LLC

Created

2006-04-24

Expires

2027-04-24 340 days left

Updated

2024-02-24

Name servers

ns71.worldnic.com
ns72.worldnic.com

DNS records live

NS

ns71.worldnic.com
ns72.worldnic.com

MX

10 simpleenergyonline-com.mail.protection.outlook.com

TXT

apple-domain-verification=TCyH2kkJo6nKtlEW
apple-domain-verification=v44uy73bLhsEBMjx

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.safewebservices.com ip4:173.166.27.166/32 ip4:69.167.136.189/32 +a:host.prisvr6.com ip4:69.167.136.110/32 ip4:159.183.204.198/32 -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100

policy: reject (enforced)

DKIM

default: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbvp/kaUPmnxPqvXJOWWywYAcklp9DrnFD8/6gX3aEWrACsXCUrhqDtObJoTdHpEfpeJywmX7AeMb1/nMQl79UejX2u…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbtQ/7XyH8Jl6wRQS6/lyZZM6zV2UMXXfyWJIR33dMZ0223C+xseZVx3MzAtkB9uu9WkM5rSrzrFIq7Snw/X…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+qIAtZTQ9Z1NNc+tjE/K2UNReyMmjJcXntuN44QRqhkOZUqxjpYadKhaccO34yc8Ae77qyK2u/Uxn…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLseF4S53mEw2tFD3L8ho64nuUS7g8eZSgXw11/Xroqm4WvAcB3PfDBTeOgiRK1S7Yf0isOlCzyI1VChPe…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaetY8ct4f7g8psRrAVHunmXIVrLDSY+G5MIYwUJt7W2ylC1zsBoCmxDj0jbONxtrhJdPemWko70aAhi0n…

selectors probed

Certificate (current)

RapidSSL TLS RSA CA G1

from 2025-08-15 to 2026-08-15

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://simpleenergyonline.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), camera=(), microphone=(), fullscreen=(self), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' data: 'unsafe-inline' backgroundimages.concrete5.org backgroundimages.concretecms.com i.vimeocdn.com googleads.g.doubleclick.net i.ytimg.com seal-concord.bbb.org www.google-analytics.com www.google.com google.com ssl.google-analytics.com cdn.jsdelivr.net www.googletagmanager.com; font-src 'self' data: fonts.gstatic.com ka-f.fontawesome.com fonts.googleapis.com use.fontawesome.com; media-src 'self' youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.datatables.net www.googleadservices.com seal-concord.bbb.org stackpath.bootstrapcdn.com www.google.com www.gstatic.com googleads.g.doubleclick.net ssl.google-analytics.com code.jquery.com cdn.jsdelivr.net www.google-analytics.com ajax.googleapis.com www.googletagmanager.com cdnjs.cloudflare.com jquery.com kit.fontawesome.com use.fontawesome.com secure.tigerpayments.com googletagmanager.com; style-src 'self' 'unsafe-inline' www.gstatic.com cdn.datatables.net seal-blue.bbb.org stackpath.boot
strict-transport-security: max-age=63072000; includeSubDomains

Links to (2)

bbb.org×1
facebook.com×1

Linked from (1)

campionrink.org×1